Version 0.4.5 • License BSD-3-Clause
One-Line Verdict
"Stable for production use."
Healthy
Maintenance slowing down.
0 CVE History
No known CVEs.
0 KB
Light footprint.
928,395
Highly Trusted
Package Payload
14 Direct
Dependency Hell Risk: High chain complexity.
Cold-Start Impact
+1 ms
Estimated execution overhead on standard hardware.
Current Threat Level
Verified Stable
"No known vulnerabilities detected. Version 0.4.5 is stable."
Accuracy Protocol
Scanned against OSV.dev (Google Open Source) databases. Last Deep-Scan: 2026.
Is istanbul too heavy? Compare it with these industry standards:
"Yet another JS code coverage tool that computes statement, line, function and branch coverage with module loader hooks to transparently add coverage when running tests. Supports all JS coverage use cases including unit tests, server side functional tests "
istanbul is used to facilitate high-performance Node.js workflows. It provides a slim footprint of 0 KB on disk.
# Install via NPM
npm install istanbul
# Install via Yarn
yarn add istanbul
You are currently viewing a proprietary security audit for istanbul on PAudit. We aggregate global databases to provide a safety rating of 85/100.
Run npm install istanbul. This installs version 0.4.5 and adds 14 direct dependencies to your project.
Yes, istanbul records 928,395 weekly downloads, making it a Highly Trusted part of the ecosystem.